Terms & Privacy

Privacy notice for candidates

Finish my application Log out

At iwoca, we're committed to keeping your information private and secure. This notice sets out the personal data we collect and what we will do with it. This notice is applicable to all candidates applying for, or enquiring about, a role within iwoca.

If you have any questions about this policy, you can email us at talent@iwoca.co.uk or write to us at iwoca Ltd, 247 Tottenham Court Road, London W1T 7QX. You can also contact our Data Protection Officer by emailing dpo@iwoca.co.uk.

The personal data that we collect

We will collect personal data on anyone who submits a CV to us or applies for a role at iwoca. We may collect and process the following personal data about you:

  • Your name, date of birth, residential address, email address, phone number and nationality
  • Your CV and any supporting documentation (such as proof of qualifications)
  • Any other information you voluntarily provide to us

This information may have been collected directly from you or may have been submitted by someone else, such as a recruitment agency.

We may also process technical information about your device and website usage (please see our Cookie Policy for more details) as well as internal records concerning:

  • Your communications with us (e.g. emails)
  • Interview notes
  • Any test or assessment results

We may also collect and process publicly available information about your career experience and qualifications from sources such as LinkedIn.

What we will do with your data

The personal information you provide us will only be used for the purposes of assessing your suitability for a role within iwoca, conducting interviews and managing the recruitment process. This is on the basis that we have a legitimate interest in ensuring that we have the right talent to help drive the business.

Data sharing

If your details were originally passed to us via a 3rd party (such as a recruitment agency), we may provide feedback about your suitability as a candidate back to them.

We may also share your personal data with third party software providers, which enable us to manage the recruitment process and our communications with you (such services will include email, hosting and data storage).

Data transfers outside the European Union (“EU”)

The software providers mentioned above may store data on databases outside of the EU. In such cases, we will impose contractual obligations on them in order to protect your data to the standard required in the EU and ensure that your data and privacy rights are not infringed. This may also involve requiring third parties to subscribe to recognised international frameworks intended to enable secure data sharing, for example the Standard Contractual Clauses, or, where personal data is transferred to the USA, the Privacy Shield certification program.

Standard Contractual Clauses and confirmation of Privacy Shield certification are available on request.

How long will we retain your information for?

The period for which we may retain data about you will depend on the purposes for which the data was collected, whether you have requested deletion of the data, and whether any legal obligations require the retention of the data (for example, for legal or regulatory compliance). We will not retain data about you for longer than is necessary to fulfil the purposes for which the data was collected.

For example, if your application is unsuccessful, we will typically keep your data for up to 18 months from the date of your last communication with us. For successful applicants, we will typically keep your data for up to 10 years after your employment has ended. We may keep your personal data for a longer period where it is necessary for legal, regulatory or operational purposes.

Automated decisions

As part of assessing your application, decisions may be made by automated means. This means we may automatically decide not to proceed with your application due to your ineligibility to work in the UK.

Your rights

Your personal data is protected by legal rights, which include your right to:

  • Object to, or request a restriction of, our processing of your personal data
  • Request that your personal data is erased or corrected
  • Request access to your personal data
  • Obtain and reuse certain personal data for your own purposes

For more information or to exercise your data protection rights, please contact us using the contact details above.

You also have the right to complain to the Information Commissioner's Office, which is the UK regulator which upholds rights in relation to individuals’ personal data.

We may update this notice (and any supplemental privacy notice), from time to time. We will notify of the changes where required by law to do so.

Last updated - May 2018

Get approved for up to £200,000 today. No fees, no commitments.



Log in

Reset your password


Enter your email and we'll send you a link to reset your password.

We've sent you an email with a link to reset your password.
Contact us if you don't receive this within the next few minutes.


Get in touch

Thank you, we'll be in touch soon.